Privacy Policy

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE RESPONSIBLE

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Lily London. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the person responsible). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.


2) DATA COLLECTION WHEN VISITING OUR WEBSITE

If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/reference from which you came to the page

  • Browser used

  • Operating system used

  • IP address used (if necessary: in anonymized form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.


3) COOKIES

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed through individual cookies implemented by us, the processing takes place in accordance with Article 6 Paragraph 1 Letter b GDPR either to implement the contract or in accordance with Article 6 Paragraph 1 Letter f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

We may work with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in each case in the paragraphs below.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Please note that if you do not accept cookies, the functionality of our website may be restricted.


4) CONTACT US

When you contact us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in answering your request in accordance with Article 6 Paragraph 1 Letter f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b GDPR. Your data will be deleted after your request has been finally processed; this is the case if it can be seen from the circumstances that the matter in question has been finally clarified and provided that there are no legal retention obligations to the contrary.


5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT PROCESSING

In accordance with Article 6 Paragraph 1 Letter b GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Your customer account can be deleted at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked in consideration of tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or reserve the right to further use of your data as permitted by law on our part, which we will inform you about below.


6) USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Registration for our email newsletter
If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing any further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter. This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to the newsletter being sent. We will then send you a confirmation email asking you to confirm that you would like to receive future newsletters by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a GDPR. When you register for the newsletter, we save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this, which is permitted by law and about which we inform you in this declaration.

6.2 Sending the email newsletter to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for goods or services similar to those you have already purchased from our range. We do not need any separate consent from you for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 Paragraph 1 Letter f GDPR. If you have initially objected to the use of your email address for this purpose, we will not send emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the person responsible named at the beginning. For this, you will only incur transmission costs according to the basic tariffs. Once your objection has been received, the use of your email address for advertising purposes will be stopped immediately.


7) DATA PROCESSING FOR ORDER PROCESSING

7.1 The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract processing, to the extent that this is necessary to deliver the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, provided this is necessary for payment processing. If payment service providers are used, we will provide explicit information about this below. The legal basis for passing on the data is Article 6 Paragraph 1 Letter b GDPR.

7.2 Use of payment service providers (payment service providers)

  • PayPal: When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). The transfer takes place in accordance with Article 6 Paragraph 1 Letter b GDPR and only to the extent that this is necessary for payment processing.

  • SOFORT: If you select the payment method “SOFORT”, payment is processed via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we will send the information you provided during the ordering process, along with the information about your order in accordance with Article 6 Paragraph 1 Letter b GDPR.


8) CONTACT FOR RATING REMINDER
We use your email address as a one-time reminder to submit a review of your order for the review system we use, provided you have given us your express consent to do so during or after your order in accordance with Article 6 Paragraph 1 Letter a GDPR. You can revoke your consent at any time by sending a message to the person responsible for data processing.


9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS
Our website uses so-called social plugins (“plugins”) from social networks such as Facebook, Google+, and Instagram. These plugins are integrated using the Shariff solution, which ensures that no connection is established to the servers of the respective social network when you access a page on our website that contains such buttons. When you click on the button, a new browser window opens and calls up the respective social network's page, where you can interact with the plugins there (if necessary after entering your login data).


10) ONLINE MARKETING
Our website uses online marketing tools such as DoubleClick by Google and Google AdWords to serve ads that are relevant to users, improve campaign performance reporting, and prevent users from seeing the same ads multiple times. These tools use cookies to collect and process certain user information such as browser and location data as well as IP address values. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6 Paragraph 1 Letter f GDPR.


11) WEB ANALYSIS SERVICES
Our website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses cookies to analyze your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there. The processing is carried out on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6 Paragraph 1 Letter f GDPR.


12) RETARGETING/REMARKETING/RECOMMENDATION ADVERTISING
Our website uses retargeting and remarketing tools such as Facebook Custom Audience and Google AdWords Remarketing to advertise this website in search results and on third-party websites. These tools use cookies to track user behavior and serve personalized ads based on the pages you visit. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6 Paragraph 1 Letter f GDPR.


13) RIGHTS OF THE AFFECTED PARTY
You have the following rights under the GDPR:

  • Right to information (Article 15 GDPR)

  • Right to rectification (Article 16 GDPR)

  • Right to deletion (Article 17 GDPR)

  • Right to restriction of processing (Article 18 GDPR)

  • Right to data portability (Article 20 GDPR)

  • Right to object (Article 21 GDPR)

  • Right to revoke consent (Article 7 Paragraph 3 GDPR)

  • Right to lodge a complaint with a supervisory authority (Article 77 GDPR)


14) DURATION OF STORAGE OF PERSONAL DATA
The duration of storage of personal data is determined based on the respective legal retention period (e.g., commercial and tax retention periods). After the deadline has expired, the relevant data will be routinely deleted unless it is no longer required to fulfill or initiate the contract and/or we have no legitimate interest in continuing to store it.


Contact Information:
For questions about data protection, please contact us at lilylondon.help@gmail.com.